Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/323830343a346565343a3a2f33322d3338203d3e20323638323839.roa
File:                     323830343a346565343a3a2f33322d3338203d3e20323638323839.roa (raw, json)
Hash identifier:          xUPlt+Tg4YqhDonlgH9xH1d9imF4U/CvvpDu5PiD1Wo=
Subject key identifier:   6A:08:CF:7E:65:89:E3:BE:E2:1A:D5:12:F0:75:C8:22:D6:D8:05:E6
Certificate issuer:       /CN=B56EEE7304E8D507FC1F8793090E1D975EFC96F1
Certificate serial:       25C7CE722514956B33202D1DE56F9EA6E8D3320C
Authority key identifier: B5:6E:EE:73:04:E8:D5:07:FC:1F:87:93:09:0E:1D:97:5E:FC:96:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B56EEE7304E8D507FC1F8793090E1D975EFC96F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/323830343a346565343a3a2f33322d3338203d3e20323638323839.roa
Signing time:             Sat 29 Jun 2024 17:34:31 +0000
ROA not before:           Sat 29 Jun 2024 17:29:31 +0000
ROA not after:            Sat 28 Jun 2025 17:34:31 +0000
asID:                     268289
IP address blocks:        2804:4ee4::/32 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c7:ce:72:25:14:95:6b:33:20:2d:1d:e5:6f:9e:a6:e8:d3:32:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56EEE7304E8D507FC1F8793090E1D975EFC96F1
        Validity
            Not Before: Jun 29 17:29:31 2024 GMT
            Not After : Jun 28 17:34:31 2025 GMT
        Subject: CN=6A08CF7E6589E3BEE21AD512F075C822D6D805E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:55:94:bd:46:29:7e:be:35:87:05:5b:f5:
                    e5:0f:78:2d:ed:e5:30:7b:e7:02:32:90:ff:f9:6f:
                    ea:88:bf:17:df:99:d4:4c:4a:50:3e:04:08:4a:84:
                    ad:a5:90:d1:ea:7c:da:08:3d:6a:59:bf:ca:71:ac:
                    a0:2d:b9:27:37:68:f0:5a:64:80:43:58:26:da:d4:
                    eb:94:ad:50:d2:ab:38:d1:b6:87:89:e1:25:83:57:
                    bf:69:fd:98:a3:bc:65:89:a0:a3:30:ea:49:24:d7:
                    75:8b:50:fd:b9:67:0a:0d:b1:b3:ed:a4:db:e8:d8:
                    76:93:6d:5b:43:e8:bb:7d:e8:39:85:80:b9:91:9e:
                    81:c7:a5:66:36:3b:8e:0e:5d:02:e7:24:16:19:37:
                    b4:87:dd:a2:aa:45:0f:5f:48:ea:8e:d9:d6:55:80:
                    8c:4d:a7:43:ec:9d:61:a1:d8:8c:4d:ac:53:63:19:
                    29:4e:c0:04:f5:b9:ce:ce:83:be:d0:0a:eb:72:5d:
                    c4:15:39:90:79:c8:15:c7:19:89:7d:ac:c7:20:3a:
                    18:e5:2f:bb:27:d2:c9:e9:34:61:de:e5:d3:4a:f5:
                    c0:5c:af:8d:a7:71:da:54:20:a6:d2:ed:56:56:6a:
                    a4:53:7f:6f:79:c4:32:7e:19:e0:0c:3c:22:c3:db:
                    2f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:08:CF:7E:65:89:E3:BE:E2:1A:D5:12:F0:75:C8:22:D6:D8:05:E6
            X509v3 Authority Key Identifier:
                keyid:B5:6E:EE:73:04:E8:D5:07:FC:1F:87:93:09:0E:1D:97:5E:FC:96:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/B56EEE7304E8D507FC1F8793090E1D975EFC96F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B56EEE7304E8D507FC1F8793090E1D975EFC96F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/323830343a346565343a3a2f33322d3338203d3e20323638323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ee4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:ab:b7:98:fd:5c:76:49:c9:59:e5:f8:b3:aa:e4:2e:47:ea:
         3a:81:5d:de:81:0a:d1:bd:60:fa:ca:ab:4b:03:67:d7:6e:1e:
         9e:b8:f0:58:dd:a2:bd:19:cc:4f:d4:85:74:77:0c:84:ba:e1:
         5d:e2:c3:a0:2e:fa:8d:72:c9:03:0c:02:33:ee:a0:9c:30:26:
         41:dc:f3:8e:07:f3:6f:63:b4:4f:58:70:d5:b0:9b:83:58:c7:
         31:fd:81:5f:31:f0:17:75:e2:91:e3:ac:e5:2c:6a:d3:39:31:
         25:fa:fc:38:fe:fc:92:2a:99:f8:3d:29:d5:71:37:8f:18:31:
         c5:52:ef:57:37:6a:60:b1:cb:35:3d:63:e7:87:b1:bd:6d:70:
         05:6a:dc:ea:e3:55:a9:dc:6f:39:56:8e:6a:78:15:9a:0c:fd:
         64:8f:54:de:0a:a4:ea:bd:45:3f:18:fa:84:da:38:ce:8c:dd:
         04:82:e3:1e:d4:e1:4e:31:63:51:d2:2e:a5:40:cd:46:27:bc:
         c5:aa:07:19:38:ff:2d:c0:a4:60:fe:36:5d:4e:ee:f7:b4:b4:
         07:df:ab:1c:0d:3b:19:bf:92:8f:ae:09:70:be:e9:f4:a6:e4:
         a2:c7:e0:68:82:3e:07:f2:8c:37:0f:76:1d:de:85:2c:a0:3f:
         aa:d4:35:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:51 2025 by rpki-client